[caclmgrd] remove default DROP rule on FORWARD chain (#5034)

sonic-net · Jul 24, 2020 · 1587889 · 1587889
1 parent 55d3ecd
commit 1587889
Showing 1 changed file with 0 additions and 2 deletions.
diff --git a/files/image_config/caclmgrd/caclmgrd b/files/image_config/caclmgrd/caclmgrd
@@ -378,9 +378,7 @@ class ControlPlaneAclManager(object):
         # add iptables/ip6tables commands to drop all other incoming packets
         if num_ctrl_plane_acl_rules > 0:
             iptables_cmds.append("iptables -A INPUT -j DROP")
-            iptables_cmds.append("iptables -A FORWARD -j DROP")
             iptables_cmds.append("ip6tables -A INPUT -j DROP")
-            iptables_cmds.append("ip6tables -A FORWARD -j DROP")
 
         return iptables_cmds